Daniel Stenberg wrote:
> On Fri, 2 Mar 2007, Welling, Conrad Gerhart wrote:
>
>> I'm building a Windows 2000/XP application and I intend to make use of
>> the curl library, having recently discovered its benefits. I intend
>> to utilize the curl library HTTPS capability with a FIPS-compatible
>> OpenSSL build, which I understand (see below) must be based upon an
>> openssl 9.7.x branch. Am I correct in assuming that the current
>> version of the SSL-enabled curl library was built to be linked with an
>> openssl 9.8 branch?
>
> No, libcurl is released as source code and you can most probably build
> it with both 0.9.7 and 0.9.8 just fine.
>
>> If so, which version and package of the curl library should I use to
>> link with an openssl 9.7.x branch?
>
> Get the latest source and build your own and link it with whatever
> version you please!
>

It is important to note that depending on what you are doing your
application does not automatically inherit the FIPS validation.

See this post for some more details:
http://www.nnseek.com/e/mailing.unix.opensshdev/openssh_use_of_openssl_in_fips_mode_39130493t.html

rob
Received on 2007-03-20